Change REST API JSON Schemas to NIST GitHub References

[rgauss]

As part of a previous issue, it was found that the JSON schemas NIST produces contain $ref elements by $id rather than path which seems to only be supported in OpenAPI v3.1 (and Swagger UI hasn't caught up to that yet). See GitHub comment

We’ve also submitted a feature request to another NIST repo that facilitates the pipeline that creates the OSCAL JSON schemas: usnistgov/metaschema#160

As a result, in we forked the NIST OSCAL repo and 'manually' changed the JSON schemas to ref by path.

If/when NIST updates their JSON schemas or Swagger supports OpenAPI v3.1 we should revert the OSCAL REST API definition to reference NIST GitHub JSON schemas rather than our fork.

[rgauss]

Migrated from Jira

[flickerfly]

I actually started a discussion at NIST OSCAL's repo on this as I was trying to figure out what was going on.
usnistgov/OSCAL#1057

[rgauss]

I actually started a discussion at NIST OSCAL's repo on this as I was trying to figure out what was going on.
usnistgov/OSCAL#1057

Thanks @flickerfly, just added another comment there.

[rgauss]

Adding comments from a duplicate issue #48:

NIST is working on updating the JSON schema to support path refs.

We have created a PoC branch that points to those changes which seems to render appropriately in the Swagger Editor.

Once those changes have been finalized we should update our references.

and

Looks like the gist has been updated and we'll need to make some tweaks.

[kylelaker]

To provide an update on this, as of today, neither the OSCAL schemas have been updated nor has Swagger editor gotten support for OpenAPI v3.1. We will have to continue to point to our fork for now.

It does look like the Metaschema change has been added to the 0.9.0 milestone which is their "current" milestone.

[brian-comply0]

@mpemy did you experience this.
Now that we've are producing OpenAPI 3.1 syntax, which is now supported by the new Swagger, are we able to close this issue?
If not, is this something you can have your OpenAPI generator application address automatically?

[brian-comply0]

Made good progress on the collection of issues. This one will be addressed in sprint 68.

[mpemy]

Current NIST meta schemas are only available in xml. I was not able to locate json versions.

[mpemy]

Got some new insights from @brian-comply0, will address the remaining issue in sprint 69.